9af8965ad5aaef00b8c1a0165d65f9d46316fe643a1680170faa99daa9e9dda2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9af8965ad5aaef00b8c1a0165d65f9d46316fe643a1680170faa99daa9e9dda2
Size

5.1MB
MD5

638abd72ccb7d3f088c0b83a2d6d4451
SHA1

9fd4c43ca97b7624493767be1a2f4fe7a11138cf
SHA256

9af8965ad5aaef00b8c1a0165d65f9d46316fe643a1680170faa99daa9e9dda2
SHA512

2cad8a128e99bda0a6ee5b37fd89bb9a1d4d0ebdf45b16fd4c71272079738e2b13f5316a94f1e02c00c89638e5c8beaf55f1ea8664e3e1900c26004984cd7146
SSDEEP

98304:kf4EIDDHK9nhCbJzEaokXvLZw8jzcO/7KNQS8r7NL5j5tDo3STwK7zUFBVEWVtHu:Q4HKDQBKkXy+XWt815j5tDobSUFQSTl8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9af8965ad5aaef00b8c1a0165d65f9d46316fe643a1680170faa99daa9e9dda2

Files

9af8965ad5aaef00b8c1a0165d65f9d46316fe643a1680170faa99daa9e9dda2
.exe windows:5 windows x86 arch:x86

f427ec01d51b9c584dcb332a494f35bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueW

mpr

WNetGetConnectionA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

shell32

ShellExecuteA

comdlg32

GetOpenFileNameA

wsock32

WSACleanup

gdiplus

GdipSetStringFormatLineAlign

Sections

.text
Size: 3.9MB - Virtual size: 8.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE